The Federal Government has intensified efforts to enforce data privacy compliance across Ministries, Departments and Agencies (MDAs) by directing them to fully comply with the Nigeria Data Protection Act (NDP Act), 2023.
The directive is aimed at strengthening responsible data governance, protecting citizens’ personal information and boosting public trust in government institutions.
This was disclosed in a statement signed by the Head of Legal, Enforcement and Regulations at the Nigeria Data Protection Commission (NDPC), Babatunde Bamigboye.
According to the statement, the directive is contained in Circular No. 59805/S.I/74 dated July 27, 2026, and signed by the Secretary to the Government of the Federation (SGF), Senator George Akume.
The circular drew the attention of MDAs to President Bola Tinubu’s directive, which described data as a critical national asset.
The President said data is the new oil because its value increases when it is refined and responsibly shared.
He directed all ministries, extra-ministerial departments and agencies to collect information diligently and safeguard it in line with the Nigeria Data Protection Act, 2023.
The circular mandates all MDAs to comply fully with the provisions of the Act, as well as relevant regulations, guidelines and directives issued by the Nigeria Data Protection Commission in processing personal data.
It also requires every MDA to appoint a qualified Data Protection Officer (DPO) to oversee compliance and advise management on lawful data processing.
The names and contact details of the appointed officers must be submitted to the NDPC for registration.
The Federal Government further directed MDAs to engage licensed Data Protection Compliance Organisations (DPCOs), where necessary, to support compliance with the law and assist with statutory compliance audits.
In addition, agencies have been instructed to make adequate budgetary provisions for data protection activities.
These include staff capacity building, public awareness programmes, deployment of technical safeguards and periodic compliance audits.
The government also directed all MDAs to submit mandatory compliance audit returns and other statutory reports to the NDPC within the timelines specified by law.
The statement warned that Permanent Secretaries, Accounting Officers and Chief Executive Officers of MDAs would be held personally responsible for ensuring compliance with both the circular and the Nigeria Data Protection Act.
The National Commissioner and Chief Executive Officer of the NDPC, Dr. Vincent Olatunji, commended the Tinubu administration for demonstrating strong political and legal commitment to protecting the privacy and fundamental rights of Nigerians.
Olatunji said the Commission remains committed to supporting data-driven governance, adding that data accountability is essential to achieving the administration’s eight Presidential Priorities.
He also disclosed that the NDPC has established a regulatory clinic to provide technical support to MDAs in meeting their obligations under the Act.
According to him, the initiative forms part of ongoing efforts to position Nigeria for opportunities presented by the Fourth Industrial Revolution.
